$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa File: 57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa (raw, json) Hash identifier: ONiBinijN+k9sXYQSOy60cSmAZGFDGuQw7NNOixV7YI= Subject key identifier: E1:22:2D:9D:0A:82:2C:F9:D9:D7:0C:26:84:F2:14:93:19:CC:3C:14 Certificate issuer: /CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Certificate serial: 010D0C9F4328584F0AA22D21A056212614CCF588 Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 46951 IP address blocks: 23.131.28.0/24 maxlen: 24 2602:f768::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2d:21:a0:56:21:26:14:cc:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=bf84ef4f-d2b2-4634-ba33-4d768f22a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:6a:2c:b9:f3:6b:19:6f:53:7e:81:35:92: 09:df:2d:20:b8:80:4c:a1:73:df:65:ee:01:37:22: bd:77:93:7c:f1:08:07:9b:d3:b6:51:06:27:ec:ee: ce:1e:b7:ea:7a:e5:f1:53:e2:93:a6:d1:99:ec:cd: db:43:28:02:12:62:39:8f:fb:0f:9b:02:25:61:01: 0d:db:cc:82:27:34:8e:9e:62:b8:16:7e:16:04:1d: 96:43:04:35:36:17:32:24:6d:b7:49:7c:28:9a:1f: 5d:06:53:a9:8a:0a:7f:0e:20:20:d3:74:62:5d:c0: c1:b8:b1:5a:b6:27:44:89:11:7d:ae:d0:33:74:64: fe:a4:26:97:f0:71:e1:1a:f6:1b:94:c6:ef:1b:96: a2:8e:fe:d8:57:b8:48:84:d8:21:83:2d:c6:bf:3a: f6:92:d1:33:19:83:f5:d8:d1:fd:28:51:f5:32:21: a4:b4:55:41:e2:38:c1:9c:6e:45:79:18:18:68:96: 60:09:71:af:5b:54:d7:a9:14:e8:c2:f9:32:33:dd: 4a:b0:eb:01:45:4c:35:db:9e:fc:6b:72:dd:75:e8: ab:72:cf:24:47:bc:29:a7:8d:a0:7a:c8:4b:49:da: 3a:f7:74:9f:41:8b:ff:57:47:85:8b:80:08:38:59: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:2D:9D:0A:82:2C:F9:D9:D7:0C:26:84:F2:14:93:19:CC:3C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl X509v3 Authority Key Identifier: keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer sbgp-ipAddrBlock: critical IPv4: 23.131.28.0/24 IPv6: 2602:f768::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4d:ff:3d:72:e1:11:c0:45:7c:21:10:71:c4:9c:70:f0:7d: 3f:ee:e9:ec:7b:8f:14:9a:7d:55:01:93:10:97:81:fc:ac:e9: d8:a4:89:50:18:20:8b:4d:3e:cb:c1:43:0c:3a:e4:a3:41:9d: cd:ab:83:af:6f:2a:35:78:19:48:f5:75:f9:68:d0:37:9b:76: 2f:b8:68:3a:66:52:51:20:ed:b4:c8:28:a8:66:61:ba:fa:04: 04:37:8b:62:93:83:35:72:2d:ca:1b:c2:f5:a0:b2:2c:1f:92: d5:98:ac:b2:29:90:e2:36:5f:26:58:72:3c:5e:da:dd:35:e6: bd:17:c8:65:56:8a:85:13:f3:41:d4:33:ca:61:9a:1d:b4:56: 69:85:3f:39:bf:49:4a:b8:72:de:57:24:30:80:48:15:ed:8d: 14:a9:b9:53:12:6c:de:24:d3:fe:3c:f9:b3:91:56:03:7d:63: 72:94:29:3c:2b:e9:03:4d:13:00:5c:bc:a1:35:5b:b6:b5:dc: c7:a5:69:38:66:13:d9:da:12:c0:a7:3f:5e:e7:b3:8d:c0:fa: cc:6f:12:44:f1:69:34:e2:91:95:df:24:79:76:e9:6d:89:76: 42:ff:d8:a3:7a:80:fd:e0:1c:3d:bf:ca:c8:16:0c:f0:12:19: c7:33:37:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Koi0hoFYhJhTM9YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE3OTE2NzctMmY2Yi00ODI4LWE3NTQtMWQxNmI3NmE4 YTY4MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk YmY4NGVmNGYtZDJiMi00NjM0LWJhMzMtNGQ3NjhmMjJhMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra9qLLnzaxlvU36BNZIJ3y0guIBMoXPfZe4B NyK9d5N88QgHm9O2UQYn7O7OHrfqeuXxU+KTptGZ7M3bQygCEmI5j/sPmwIlYQEN 28yCJzSOnmK4Fn4WBB2WQwQ1NhcyJG23SXwomh9dBlOpigp/DiAg03RiXcDBuLFa tidEiRF9rtAzdGT+pCaX8HHhGvYblMbvG5aijv7YV7hIhNghgy3Gvzr2ktEzGYP1 2NH9KFH1MiGktFVB4jjBnG5FeRgYaJZgCXGvW1TXqRTowvkyM91KsOsBRUw12578 a3Lddeircs8kR7wpp42geshLSdo693SfQYv/V0eFi4AIOFnjOwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOEiLZ0Kgiz52dcMJoTyFJMZzDwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTc5 MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2YThhNjgvNTdjYmUyNjYtODM5NS0z N2NlLWE1OGEtYTNlZTNkNGZkOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE3OTE2NzctMmY2Yi00ODI4LWE3 NTQtMWQxNmI3NmE4YTY4LzVhNzkxNjc3LTJmNmItNDgyOC1hNzU0LTFkMTZiNzZh OGE2OC5jcmwwHwYDVR0jBBgwFoAUAtjlyJOk+AK2NNm1H49BVbtqmUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2 Yjc2YThhNjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4McMA4E AgACMAgDBgQmAvdoADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoTf89cuERwEV8IRBxxJxw8H0/7unse48U mn1VAZMQl4H8rOnYpIlQGCCLTT7LwUMMOuSjQZ3Nq4Ovbyo1eBlI9XX5aNA3m3Yv uGg6ZlJRIO20yCioZmG6+gQEN4tik4M1ci3KG8L1oLIsH5LVmKyyKZDiNl8mWHI8 XtrdNea9F8hlVoqFE/NB1DPKYZodtFZphT85v0lKuHLeVyQwgEgV7Y0UqblTEmze JNP+PPmzkVYDfWNylCk8K+kDTRMAXLyhNVu2tdzHpWk4ZhPZ2hLApz9e57ONwPrM bxJE8Wk04pGV3yR5dultiXZC/9ijeoD94Bw9v8rIFgzwEhnHMzcF -----END CERTIFICATE-----Generated at Tue Sep 22 13:11:18 2026 by rpki-client